the weak hashes part is by design - US government design. Exporting software with strong crypto wasn't possible before the late 1990s. see https://en.wikipedia.org/wiki/Export_of_cryptography_from_th...